Adding some authorization with devise