order the data
dry'ify the param convert
add devise dependency
add forgotten devise-generated stuff; move cors to middleware; make devise json-ready