Remove session and #new action, amend  @user to find by token
Moved to show template
Moved new template to show
Amend specs to reflect removal of session