This should fix it

All is working fine on my computer. Check out the commits one by one. The big issues were a misnamed database field (you had :username instead of :name); a variable (auth_hash) that wasn't being passed correctly in sessions#create; and a malformed current_user=() method in the Appllication controller. Also fixed your Authorizations model, which was missing the proper attr_accessible declarations.