Replaces clearance with devise. Adds basic token based authentication.

@azevedo-252 bump.
Well, I agree, but the thing is you should be able to use either method, as you can see neither of them is private.