Move Devise requirement to application.rb

That avoids the "uninitialized constant Devise::SessionsController" error.