add test case for not allowing deletion of another user's bookmark
don't store user session when signing in
comment out token authenticatable (using custom solution instead)
require username param along with the auth token for authentication
initial application controller test suite