adding custom route for devise to allow an access token to be passwrd via url