basic devise in place - no auth yet