using devise for resource_owner_from_credentials