Add UserToken some specs, remove RABL gem, tie API authentication to DB UserToken