update records controller
Merge branch 'feature-patient-upload-with-audio'
enable token authentication for patients
disable CSRF protection temporary
overwrite sessions create