David Kimura PRO said over 4 years ago on API Authentication with Omniauth :
Adding a domain to the session store seemed to help some people out. Check out https://github.com/omniauth/omniauth-oauth2/issues/58