SessionsController.rb

class SessionsController < Devise::SessionsController
  # skip_before_filter :require_no_authentication

  def create
    # raise user_signed_in?.inspect
    self.resource = warden.authenticate!(auth_options)
    set_flash_message(:notice, :signed_in) if is_flashing_format?
    resource.authentication_token = nil
    resource.save!
    sign_in(resource_name, resource)
    yield resource if block_given?
    data = { id: resource.id, nickname: resource.nickname, email: resource.email, token: resource.authentication_token }
    render_response({status: 'success', data: data })
  end

  def destroy
    # TODO: regenerate token
    super
  end

  protected

  def auth_options
    { scope: resource_name, recall: "#{controller_path}#new" }
  end
end