switch to devise token auth, becuase not reinventing the wheel is awesome