user authentication via sorcery gem