authorized to current, and move to_html to initializers (String extension)
Some new tests, a comment test on the controller: ATP
merge simple_stuff to action_events