Add password and password_confirmation to users
Move the successful_login and unauthorized_reponse to the application controller
If the user doesn't supply the correct headers, return an unauthorized_response
Remove sign_up and password endpoints
Send back an unauthorized_response if the user accesses an endpoint that doesn't exist
Move the mobile endpoint to the base controller
Replace the login response with a user wrapped in a session serializer
Replace old response with session object
Render a user object wrapped by a session serializer
Merge pull request #279 from calblueprint/mark/api/user-signup

API User sign up and unauthorized responses