using devise methods to control auth on views