Make JRuby default and repair vagrant box
first attempt at devise api routes for registration
correctly wire up devise with  the api versioning
addsuccess and failure for devise registration create action
remove devise sessions routes

use OAuth and our trusted client application to provide username & password to token authentication.
Use doorkeeper resource owner password credentials authentication flow rejecting disabled users

Allow doorkeeper to convert login & password credentials to a valid token whilst rejecting disabled users. Note: this process relies on a trusted client for OAuth (our client applications).