setting up Devise for secure authentication