added user authentication through devise