basic version of authentication using devise