All these methods come from a gist here:

https://gist.github.com/josevalim/fb706b1e933ef01e4fb6#file-1_unsafe_token_authenticatable-rb

Where it talks about what to do if you still need the authentication_token attribute for a user.