devise configured for no password, some work done on friends page