replace devise with custom authentication and move api actions to api/v1 module