Added devise and specific permissions for actions