had issues with devise - seems sorted now.
still need to put back in strong params to replace attr_accessible