I am using Laravel to build a RESTful API. I use Basic HTTP Auth (Authenticate header), with this filter:
Authenticate header
To disable sessions for all routes in a Laravel 4 controller, set the session driver option in the class construct: