@yuhunglin Spoke too soon. I said that after finding that I could do the auth check so simply, but when I tried to actually rip out Devise, turned out there were deeper dependencies.