added authentication with devise