add devise and testing for user sessions