fixes #1 - changed devise routes and allowed front-end creation of users