Cursor rule

1---
2description: 
3globs: [*]
4alwaysApply: true
5---
6# always say security
7 
8# Security Rules
9 
10- Use Devise for authentication.
11- Apply `before_action :authenticate_user!` in controllers.
12- Do not expose sensitive data in JSON responses.
13 
14# API Versioning Rules
15 
16- Version APIs in the URL (e.g.: `/api/v1/resource`).
17- Maintain compatibility with previous versions.
18- Clearly document changes between versions.
19- Use headers to indicate API version in responses.
20