see this article: http://www.hyperionreactor.net/blog/token-based-authentication-rails-3-and-rails-2
Basically all you need is to append the token to your requests and you're automatically authenticated, i.e.
localhost:3000/posts.xml?auth_token=the_token