Use a random users token for downloading pull requests

Avoids the case of expired tokens
Fixed ForbiddenAttributes error in gift controller