adopt-a-hydrant/app/controllers/sessions_controller.rb

class SessionsController < Devise::SessionsController
  skip_before_filter :verify_authenticity_token, :only => [:destroy]

  def new
    redirect_to(root_path)
  end

  def create
    self.resource = warden.authenticate!(auth_options)
    if resource
      sign_in(resource_name, resource)
      yield resource if block_given?
      render(:json => resource)
    else
      render(:json => {:errors => {:password => [t("errors.password")]}}, :status => 401)
    end
  end

  def destroy
    signed_in = signed_in?(resource_name)
    sign_out(resource_name) if signed_in
    Devise.sign_out_all_scopes ? sign_out : sign_out(resource_name)
    yield resource if block_given?
    render(:json => {:success => signed_in})
  end
end