I use cookie based authentication, like houndci.com https://github.com/thoughtbot/hound I think token based authentication (rails-api) is better, but most of my technical background is rails.