devise changed for API - not finished