got devise set up with user auth