added a bad token spec and fixed password field
fixed destroy
fixed invalid token spec
Merge branch 'master' of github.com:tienyuan/open-todo into upgrade-rails