Devise auth before anything except index