gem cleanup

* get rid of auth_devise
* loosen restriction to any 2.1 spree