Places new and index available unauthorized
add User.current and current_user
Visitor behaviour spec
User roles