May 16th

# What's new

 * Created a `Device` factory for testing
 * Added secret key scheme for production machine
 * Created an `API::DeviceController#destroy()` action
 * Added a `ensure_device_ownership` method (but need to use a real authorization solution)

# What's next?

I need to hit the destroy action from the UI layer (`/dashboard#/devices`)