some simple tests to generate auth tokens/look up users
WIP: use auth tokens as authentication in api controller