added devise authentication