added user auth with devise