blacklisting anything that has a controller that regex matches /devise/ and any non-GET requests