Use devise for firms

Still need to consider if we really want confirmation emails sent as part of `Firm#create`, we'll discuss the data import side with @benlovell after lunch