@bradf83 has recommended we just go full OAuth. Doorkeeper might be our ticket. https://github.com/doorkeeper-gem/doorkeeper WIKI: https://github.com/doorkeeper-gem/doorkeeper/wiki
