added user authentication by installing devise gem