- restructure routes: read via /users/:id/collection/*, write via /collection/* - add user lookup + privacy check to collection_characters_controller - add race, proficiency, gender scopes to model - delete old collection_controller