set secret tokens and ignore token in session controller
add shoulda-matchers gem
start of multiplayer