add accesss_control with devise to be able use the controllers