add validations
devise authenticate_user!