after adding devise and user authentication