devise, user model, and flashes