added pry-rails
token authentication + strong parameters