adding authentication via devise