Securing your Rails API without being a security expert
programmableweb.com