Create UserActions model to track user actions

first pass at user audit/log stuff

Create a UserActions model, which belongs to User and has an associated record + action.

Also create an AuditWrapper, which makes it easy to add an audit event to a model
may as well replicate the `let(:token)` you added above