added tokens#destroy, refactored token_controller_spec