plataformatec/devise — Issue #1391: Session JSON stops including authentication_token between 1.3.4 and 1.4.8
Author: lynaghk
Created: 2011-10-17 23:01:41+00:00
State: open

I upgraded devise to 1.4.8 and my applications `/accounts/sign_in` route stopped returning the `authentication_token` field with the rest of the users fields in the JSON on a successful login.
What is the recommended way to return this field?
Simply adding an `attr_accessible` on the `User` model works, but I take it that would be a huge security hole.