sessions_controller.rb

class SessionsController < ApplicationController
  def create
    user = User.find_by_email params[:username]
    if user && user.authenticate(params[:password])
      render json: { access_token: user.access_token }
    else
      render json: {}, status: 401
    end
  end
end