fixed npe without authorization
?
updated to rails 3.2.10