adds token authentication to devise