* added mocha to test environment for mocking/stubbing
* added sessions_controller_spec to test token authentication requests

* implemented some of the sessions#create specs on the sessions controller

* removed the #destroy action from the users controller, since this handled by devise