Use request.headers to send auth_token instead of params hash
Extract authentication method to separate concern class + use finders instead of scopes
Merge pull request #40 from fs/send-auth-token-in-headers