added user/auth via devise gem