added devise for user auth