added authentication with devise gem