removed unnecessary authenticate filter, fixed up devise/cancan division of labor