add user api authenticate method
user scaffold_controller instead
add authentication before tour_order_controller
add tour_order routes
Merge branch 'feature/tour_order_api' into develop, finish #62