rails,android: more work on authentication