add reference to railscasts
add generator for permission