added devise and authentication