fixed auth devise