got rid of custom restful authentication logic and replaced with overridden devise sessions controller