added user login and auth via devise