add token auth rails