authlogic/user framework in place