user can login, logout, edit profile - devise