added user auth with Devise