Sessions controller, devise authentication_token