Is this Rails JSON authentication API (using Devise) secure? Is this Rails JSON authentication API (using Devise) secure? json json