Add pry; bundle install
Cleanup
Add render_forbidden
Explicitly return true in authorization controller method
Cleanup ApiUser class + specs
Add attr_accessible and validations to Permission
Add email to ApiUser
Rename authentication_token to auth_token
Add permission matcher
Cleanup ParamHelper
More specs for api/assets_controller