devise authorization, 90% done
points_table