Add spec: models can act as token authenticatable