added authentication using Devise; finished the tutorial