override devise sessions controller for json api
override devise registrations controller for json api
disable devise password routes
setup cancan gem
fix for CanCan ActiveModel::ForbiddenAttributesError with rails 4