implemented user authentication using devise