use the simple_token_authentication gem to provide the API authentication (wip)