Securing an API in Rails 5

Securing an API in Rails 5 from Scratch using Token based authentication with token expiration and mitigation of time based attacks.