use .token_authenticated?
not use Time.parse so created_at is Time
typo