сейчас ругается на токен
ActionController::InvalidAuthenticityToken in Devise::SessionsController#create
если отключить protect_from_forgery, то просто девайз сваливается в new и не пускает пользователя
SQL (0.4ms) UPDATE "users" SET "current_sign_in_at" = $1, "last_sign_in_at" = $2, "sign_in_count" = $3, "updated_at" = $4 WHERE "users"."id" = $5 [["current_sign_in_at", "2021-02-25 07:32:45.946700"], ["last_sign_in_at", "2021-02-25 07:14:14.268601"], ["sign_in_count", 426], ["updated_at", "2021-02-25 07:32:45.948111"], ["id", 996]]
(4.5ms) COMMIT
Redirected to http://localhost:3000/
Completed 302 Found in 119ms (ActiveRecord: 6.4ms)
Started GET "/" for ::1 at 2021-02-25 10:32:45 +0300
Processing by UsersController#index as HTML
Completed 401 Unauthorized in 0ms (ActiveRecord: 0.0ms)
Started GET "/users/sign_in" for ::1 at 2021-02-25 10:32:45 +0300
Processing by Devise::SessionsController#new as HTML
Rendering devise/sessions/new.html.erb within layouts/application
Rendered devise/shared/_links.html.erb (1.4ms)
Rendered devise/sessions/new.html.erb within layouts/application (5.9ms)
Completed 200 OK in 10ms (Views: 8.7ms | ActiveRecord: 0.0ms)
токен приходит, форма девайза без изменений(в соседней ветке с этой формой все работает ок)
нет идей куда посмотреть еще?