add user model, add devise gem, remove authentication by group