added devise authentication to User model