add authentication using devise