devise auth. i really should have made a branch for this