make devise token authenticatable
use someone's branch of api_taster to get devise to show up