auth_token for devise and mobile apps