authenticate for all pages inc. homepage, fix devise redirect