add api_controller
whole app_token process
add missed files
send app_token only when sign_in
All api controller inherit from ApiController
Algorithm in comment
gemfile + commented algo amelioration
comments on readme