added user authentication with Devise gem