helper methods
set up rspec with devise controller helpers
remove reference to old filter name
use :includes, so that related model is no read-only
include public auth_token with test requests