title: Rails API : Best way to implement authentication?
body: <p>I'm writing a Rails 4 app that will expose an API for a mobile app that's yet to be developed. Users will authenticate using an e-mail and password from the mobile app.</p>
  
  <p>While I've found quite a bit of information on the topic. It's hard to discern what's dated or non-optimal. I've read about HTTP Basic Auth, which doesn't seem too secure, and HTTP Token-based Auth, but I'm not sure on how to couple that with regular e-mail and password authentication (I'm using Devise by the way).</p>
  
  <p>I'd just like to know what's the current best practice on how to implement this, so I'll be sure to be going the right way.</p>