rails_admin and devise
securing donations controller