added devise and basic user authentication