Add more docs
Disable token_authenticatable since it's deprecated
Re-invent token auth in controller
Move all token/cart functionality out of User
Generate an API key for users
Revisit serializers and add specs
Refactor methods out of controllers and into declarative modules
Spec for order attrs and user data
Remove OrdersHelper
Fix naming