base ror using devise for auth / model done