added additional user_flow tests
added put/delete tests
added token_flow 400 tests
added comparePassword to user model
added test for invalid credentials on token_flow
added token creation