local auth with devise, only to dashboard view