title: Using auth_token from request headers instead from POST/PUT parameters with Rails 3 / devise
body: <p>I need to use token based authentication in a Rails 3.1 API in conjunction with the most recent version of devise. No problem so far. </p>
  
  <p>Now I do not want to append my :auth_token to the POST/PUT parameters on client side but send this token as a request header like HTTP_X_MYAPP_AUTH_TOKEN". </p>
  
  <p>Can I convince devise from using that rather than a token from parameters? Is it possible to implement both, so that my API users can send the token via request header OR POST/PUT parameter? </p>
  
  <p>Regards. Felix</p>