adding customer authentication via 'devise'