Docs: #684

Author: jaredbeck

CHANGELOG.md

@@ -10,7 +10,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 * Breaking Changes
   * None
 * Added
-  * None
+  * [#684](https://github.com/binarylogic/authlogic/pull/684) - Use cookies
+    only when available. Support for `ActionController::API`
 * Fixed
   * None
 

README.md

@@ -36,6 +36,7 @@ An unobtrusive ruby authentication library based on ActiveRecord.
   - [2.b. Controller](#2b-controller)
     - [2.b.1. Helper Methods](#2b1-helper-methods)
     - [2.b.2. Routes](#2b2-routes)
+    - [2.b.3. ActionController::API](#2b3-actioncontroller-api)
   - [2.c. View](#2c-view)
   - [2.d. CSRF Protection](#2d-csrf-protection)
 - [3. Testing](#3-testing)
@@ -345,6 +346,13 @@ Rails.application.routes.draw do
 end
 ```
 
+#### 2.b.3. ActionController::API
+
+> Because ActionController::API does not include ActionController::Cookies
+> metal and ActionDispatch::Cookies rack module, Therefore, our controller can
+> not use the cookies method.
+> - [#684](https://github.com/binarylogic/authlogic/pull/684).
+
 ### 2.c. View
 
 For example, in `app/views/user_sessions/new.html.erb`: