embed hidden field token in user post form
added new user controller specs for follow method
refactor users controller for new tests