added full devise authentication with user confirmation