api_key and user token working as expected
api_key and user token working as expected
user found by params, current_user loading