added user authentication with devise gem