devise authorization for root_path and tests for the user story