Devise 3.1 removed TokenAuthenticatable; we need that back