gem cleanup

* accept any 2-1 version of spree
* remove auth_devise in Gemfile (not needed)
remove auth_devise, re-impose 2.1.x requirement