add devise gem for user authentication