Writing Rails authentication from scratch, Railscast 250