example of better authorization in rails controller
Merge branch 'master' of github.com:rilian/playground