access control and faker! need to fix application.erb stuff