updated user class with devise authentication