https://eddorre.github.io/posts/using-json-web-tokens-in-a-rails-api-part-two/