Finish API specs and documentation

Show json error when auth token isn't valid
Set up factories