/api/orders index will now return only completed orders for the current user if they are not admin, rather than throwing up unauthorized
Add token to order attributes returned in api
update readme
Experimental changes w/ session & user controllers.  Probably best to actually just do this in spree_auth_devise and leave the api alone for these two methods as we need to hook into devise to sign_in and set session data