Token management and verification in your Rails app