paperclip and authentication