revised layout of Gemfile
installed Grant
added grants to users, but just allowed everything; relying on Devise for user security