Some tips when writing an API in Ruby on Rails

Out of interest, what's the standard "Railsy" way to secure an API? I know that Devise comes with support for PSKs and basic auth, so is that pretty much what everyone does as a first step?