Rails authentication skeleton with User validations and sessions and cookies