added specs for create action
Added token auth stuff
Added create action
Update action for stories