add devise-token_authenticable gem
expose fields and add before_save filter