User api : multiple addition and fixes to the API

- Add user creation
- Add user modification
- Add user login
- Add login_helpers which allows authentification with cookies
- Token are now automatically generated with SecureRandom.hex
- User's passwords are now store with BCrypt
- Improve specs