override devise auth for API users