Rehauled authentication without devise