very simple db authentication by devise