added authentication via devise gem