Without devise's validatable, devise seems unable to match sessions to existing users (?)