configured rspec for api
added authenticity token to users