Hmm wouldn't it be better to use `skip_before_filter :authenticate, :only => :whatever` and add the `authenticated_for_rss` filter for the rss feed? I'd find it a bit scary to allow using this token so generally.