API security provided, initial interface with devise-cancan-rolify provided