added authentication (gem devise)