add device_for in routes, add configure_permitted_parameters in Application Controller for sign in sign up