add authenticator and authorizer for Devise