unneeded requires in spec_helper
add permitted params to leafs controller
use phony secret token in dev and test
schema
fix delete posts spec