BikeShed-1/app/controllers/api/v1/base_controller.rb

class Api::V1::BaseController < ActionController::Base
  respond_to :json

  before_filter :authenticate_user

  private
    def authenticate_user
      if params[:username]
        user = User.find_for_database_authentication( :email => params[:username] )
        @current_user = user if user && user.valid_password?( params[:password] )

        if @current_user.nil?
          msg = "Username/Password/Token invalid"
          render :json => {:error => msg }, :status => 403 and return
        end
      else
        authenticate_user!
        @current_user = current_user
      end
    end
end