tweaks to devise/cancan, guest setup