added basic devise authorization