Turn of User devise validatable and other unused modules.

Looks like we have to keep database_authenticatable, otherwise routes disappear.
destroy_user_session_path disappeared.