brings back index.html, changes devise redirects

Devise redirects go to notes_index_url now instead.  Fixed
authentication spec to match.  Added a notes_controller with
a default index action.