api using devise
server side switch before handrolled auth
server protocols coming along nicely