adding devise for authentication (bare-bones)