Using a built-in Devise method for authorization