phew, changing the app to use devise is more work than anticipated