adding user authentication with devise