add some user auth with devise gem