added devise auth