an security extension for devise