Devise authentication and API

I'm working on JSON REST API for an existing Rails application. Authentication is currently implemented with Devise. What could be potential pros and cons of using cookie-based user sessions for API calls as well as web pages?
ges?