reverted to pre-auth to change it to devise