devise pin auth reference