Refactors to after_initialize :ensure_authentication_token!

- instead to before_save (did not work in controller)
Users#create returns 'authentication_token'