Move user session and password management out of api
Make sure devise controllers respond with both html and json
Fix sign in order
Add json sign and sign out methods
Allow resource owner credentials with devise session
Regenerate CSRF tokens on log-in log-out
Add specs for devise login
Return list of auth providers when requesting /users/news as json
Restrict devise routes for sign in and user creation
Merge pull request #101 from edpaget/first-party-login

First party login