use Rails' default token auth support for devise
fixed test