auth with devise
yaml config