authen with devise via api