added a todo reminder to move force_ssl to config rather than calling it in application controller
added some generator config so we no longer generate all the view and assets crap, since this is an api-only app; removed unnessary modules: cookies, session and flash for the same reason; deleted secret token and session store initializers as they are no longer used or required
added some tests to make sure that NULL or empty string values for PEER_TOKEN are not validated, inspired by the many issues Rails has had with NULL values and db queries in the last few weeks