added user authentication using devise