The :access-control settings can only be applied to an entire resource and not to one of the methods only right?
e.g. I want :get
to only work for some types of roles
but I can just make a different resource / route
How can I dispatch on the requested media type?
I'll just give up and make it a parameter