last changes to devise branch (broken) before attempting to hard code auths