Fetch private list metadata and any user's personal name

Overview == When a user creates a list, they can choose whether to make the list visible in search and whether to show their name with the list. The problem is that the attacker can still access the information that the user chose to hide. Furthermore, if the attacker gets hold of a user's ID, they …

    POST /api/v2/lists/10/star_toggle
    
    {
      "meta": {
        "code": 200
      },
      "data": {
        "id": 10,
        "name": "Test",
        "description": "This is the description of a shopping list",
        "user_id": 10,
        "visible": false,
        ... …