added authentication ( devise )