posted to coffeescript
push devise
added the_role in the migration
authentication, always send auth_token in all request involving resources