added auth to devise routes