run 'rails generate controller users index authorize'
- then edit a bit