Add devise as an authentication system

@kenyonj @georgetmayorga @liantics
remove `method: :post`