Add test for profile.

Add database_cleaner to avoid FactoryGirl key collisions.
Add test for notes
Time out user session after 30 minutes of inactivity.

comment out expire session auth token on timeout