remove devise, will do auth myself