Implemented devise, note that logout method changed from delete to get -- see config/devise.rb