[NewFeature] use devise as authentication