started 385 authorization from scratch
fixed the version
authorize and limit the post function to admin
added filter to verify the admin status
Merge pull request #212 from fireweb/master

continue working on Railscast