Removed devise

Totally removed all vestiges of devise, think the sites pretty
locked up.
The before_filter on all pages but the main page mean that
should any client attempt to access without a valid user session
then they'll just be redirected to the login page.
Any access to cate will require a cookie key that is regenerated
on each fresh login.
As such, even if someones cookie was stolen, they couldn't
retrieve the password from rails (only cate data) and following
a legitimate login their key would become invalid.
Gonna pentest this shizzle, but for the moment think it's pretty
ok. (and this is all assuming unlikely situations- banks rely on
ssl, I think we can!)