Use devise for firms

Still need to consider if we really want confirmation emails sent as part of `Firm#create`, we'll discuss the data import side with @benlovell after lunch
Actually on reflection, hold fire on this. We can talk about it tomorrow :)