devise enabled for all relevant controller actions