added Devise for auth