fixed bundler warning
switched from authlogic to devise

* authlogic appears to be unmaintained with many open issues and pull
  requests.
* this is the first step in implementing more auth-related features
updated annotations
use updated method name
better auth failure handling
skip login_required? in normal routes; just use devise
use portable date/time method
fix pw in user tests
fix controller tests