added authentification using devise