title: Devise token authentication and session
body: <p>I am using devise in my rails app.  There is an ipad app that connects to the this rails app and authentication is done using token. (devise token_authenticatable).</p>
  
  <p>For sessions, I using the default cookie store. My session_stor.rb looks like this,</p>
  
  <pre><code>Ap::Application.config.session_store :cookie_store
  </code></pre>
  
  <p>Now say I need to store minor data for the ipad user in session, where is it stored? Say in my controller I am doing,</p>
  
  <pre><code>session['last_search'] = search_key_word
  </code></pre>
  
  <p>Where is this data stored? I am asking this because on cookie based session store, usually session data is stored in browser. I couldn't find any resource that explains what happens in case of a non browser client that uses token for authenticatication.</p>