add whitelist for users to join, add devise override for sessions update...

resolves #22