add rake task to display api routes; add migration for user auth token; initial copy of session module