login tested with devise