Make sure that ensure_authentication_token is executed in before_save callback.