add devis secret key and fix cancan_subjects.yml associations