added basic user authentication with devise