Authorized endpoints

[cavis]

Adds some more authorized endpoints.

• GET /authorization the current user
• GET /authorization/accounts active and approved accounts of the user
• GET /authorization/accounts/:id show account of the user by id
• GET /authorization/accounts/:id/stories list ALL (including unpublished) stories of the account
• POST /authorization/accounts/:id/stories create new story for the account
• GET /authorization/stories/:id show any story of any of the users accounts
• DELETE /authorization/stories/:id destroy any story

[coveralls]

Coverage increased (+0.05%) to 98.147% when pulling 9d13ed8 on feat/auth_stories into eaacdc3 on master.

[coveralls]

Coverage increased (+0.2%) to 98.267% when pulling d152d1a on feat/auth_stories into eaacdc3 on master.

[cavis]

Moved rubocop to the top-level, so it gets auto-detected locally.

[coveralls]

Coverage increased (+0.2%) to 98.267% when pulling b291467 on feat/auth_stories into eaacdc3 on master.

[kookster]

yeah, we added this kind of not found handling to the extracted gem. This is fine for now, will have to refactor when we pull this in: https://github.com/PRX/hal_api-rails/pull/1/files

[cavis]

Sounds good. I added this to catch some activerecord-not-found errors in very specific places, for the show/update/destroy actions. Hopefully specific enough that other unrelated model.find() errors won't trigger an incorrect 404.

[kookster]

@cavis I think that's it for my review - the :get vs. :as use is about all I see that could be changed (assuming I am right that :as can do what you need)

[coveralls]

Coverage increased (+0.2%) to 98.267% when pulling ebacd33 on feat/auth_stories into eaacdc3 on master.