Don't create server sessions for API clients.
Remove empty override.
Lock down the entire site.
Remove unnecessary routes.
Add beta sessions controller with routes.
Skip authentication for API sessions controller.
Implement logout and stateless token authentication.
Remove devise rememberable.
Merge branch 'feature/web-authentication' into prototype
Add flag for beta user authentication.
Remove users controller and use devise implementation instead.
Remove farm scaffold.