lib/devise/strategies/token_authenticatable.rb in devise-1.2.rc vs lib/devise/strategies/token_authenticatable.rb in devise-1.2.rc2

@@ -18,10 +18,10 @@
         resource = mapping.to.find_for_token_authentication(authentication_hash)
 
         if validate(resource)
           resource.after_token_authentication
           success!(resource)
-        else
+        elsif !halted?
           fail(:invalid_token)
         end
       end
 
     private