implement authentication with devise and test