adding user authenitcation with devise