do not clean DB between tests
use pepper for devise passwords
use user email and user token to id the user