Its been a while

config/application.rb

@@ -41,5 +41,12 @@ module RailsApiAuthTemplate
     # Skip views, helpers and assets when generating a new resource.
     config.api_only = true
     config.middleware.use Rack::Attack
+
+    # 1. Configure a session store type and key names
+    config.session_store :cookie_store, key: '_britton_api_session'
+
+    # 2. Re-include the required middlewares for cookies and sessions
+    config.middleware.use ActionDispatch::Cookies
+    config.middleware.use config.session_store, config.session_options
   end
 end