removing params hash merging of token and mimicking http basic auth flow
update devise config template with new allow_token_authenticatable_via_headers options