Add only and except parameters to acts_as_token_authentication_handler_for
Add tests for only/except parameters