Changes to API

We now require an authorization token for specific api, in this case
all the user api stuff requires a token.

We have changed the api so say that instead of being logged in we just
need that token.

We also update the tests and the helper and the controllers to match the above.