small alterations with delete buttons and controllers with xml and json
removed button_to_function and added onclick html attribute
increased dummy seed total to 50
small css alteration
resolved error with signed-in home-page
small alteratinos to devise.rb
added simple_authenticity_token gem to make up for Devise's lack of such a feature -> required for Android to server connections
added small custom configuration to simple_token_authenticity gem to allow token to be enough to sign in, therefore app only needs to have user sign in once and the token is enough there-after
removed simple_token_authorization to pursue conversion of devise into api server using http://www.soryy.com/ruby/api/rails/authentication/2014/03/16/apis-with-devise.html
fixed erroneous migration file
begin overwrite of devise sessions controller to turn devise into api solution, fixed misaligned header
more functionality added to API server -> bypassing authentication for android to send create json request
successful database post from Android -> all security features disabled from rails server (unsure how html access is fully affected)
added dependencies in controllers/api/appointments_controller for appointments_helper.rb -> added a check to change the text message on appointment create to see if body>160 characters in which case a dummy message is sent instead
added extra route for signing in clients from app -> bypassing devise slightly and creating separate API to return Android app a client's specific key to store in app's database on device -> key will be passed back to server to authenticate the creation of an appointment and find the specific client
commented out overwrite of Devise Sessions controller and focusing on using API controller
android app can successfully log in -> receives a user code that is used to authenticate the user (iffy b/c of pwd) and find the user for appointment creation
small alterations between sign-in and appointment submission
verify users by password (no work done on incorrect entries...yet) before sending token for subittal -> added new before_filter to give the incoming posts from Android the required csrf token
more attempts to add security features -> trying to add CSRF token to incoming post requests