add user authentication by using devise