moved to devise for autentication