added devise for user login - may be over kill we'll see. so far only admin user - no registration allowed