Adding the AuthenticationHelpers in the RSpec spec_helper to avoid including it in each feature
Refactoring for making clear that the strategy password using sessions
For request using a valid auth_token access is granted
verify that no access is granted using an auth_token from a user of other account