devise works now, shows only user favs