add feature:  authentication with devise