added devise for auth