Authorization checks for api endpoints
Refactor API resource classes to be slightly DRY-er.