use rails built in token authentication