update annotations
remove old authentication system, let devise handle all authentications