sample_request.txt

POST /user_sessions.json { "email": "[email protected]", "password": "somepassword" }
=> { "user_credentials": "123abc" }
GET /case_filters/1/cases.json?user_credentials=123abc
=> [ ...cases ... ]

user_session.rb

class UserSession < Authlogic::Session::Base

  single_access_allowed_request_types :any
  before_create :reset_single_access_token

end

user_sessions_controller.rb

class Api::V2::UserSessionsController < Api::V2::BaseController

  # Check to ensure request came from an assistly application (mobile/api console/etc)
  before_filter :assistly_client_application_required, :only => :create

  def create
    @user_session = UserSession.new(params[:user_session])
    
    if @user_session.save
      render :json => { :success => true,
                        :user_credentials => @user_session.user.single_access_token }
    else
      render :json => { :success => false, :message => "Invalid Login" }, :status => :unauthorized
    end
  end

end