I'm trying figure out a way to secure the login URL using Devise. I want to change the default route for users/sign\_in. I don't want someone to stumble across the URL and gain access to the app. 

Changing the following in the routes.rb file should give me the solution I'm looking for. However, I'm not sure if this is the best path to follow. 

```
devise_scope :user do
  get "/login" => "devise/sessions#new"
end

```

or

```
as :user do
  get "/login" => "devise/sessions#new"
end

```

Using the following may be easier

```
devise_for :users, :path => '', :path_names => {:sign_in => 'login', :sign_out => 'logout'} 

```

"But I haven't gotten it to work"

I'm using a simple install of devise without pundit or any other type of authorization. The other thought I had was to implement a role and add the current users to that role. Therefore, blocking access to the app by default. But that would require me to add every new legitimate user to that role as they sign up. Don't really want to do that.