adds user authentication via Devise gem