rest api relationships best practices