added devise and authenitcate user to correct methods in controller