added Devise auth