Switch to devise for auth