add devise and user authentication