lib/devise/strategies/token_authenticatable.rb in devise-1.1.8 vs lib/devise/strategies/token_authenticatable.rb in devise-1.1.9

@@ -14,10 +14,10 @@
         resource = mapping.to.find_for_token_authentication(authentication_hash)
 
         if validate(resource)
           resource.after_token_authentication
           success!(resource)
-        else
+        elsif !halted?
           fail(:invalid_token)
         end
       end
 
     private