finally got a devise authentication spec going