autorization (devise ajax)