devise (user authentication) is added