remove auth_devise, re-impose 2.1.x requirement