Simple api authentication engine using has_secure_password