add devise to listing controller and specs