fixed broken devise path and added route scope for authenticated and unauthenticated users