testing declarative_authorization and devise