added devise for user authentication