Add specification tests
Add auto-login token to user
Authenticate by login token
Add api command to generate a login token
Return login_token via api call
Correctly retrieve login_token from user not uid