fix TODO & setup authorization for current user
change views and controller
fix specs
Merge pull request #18 from AlexKtf/setup-authorization

Setup authorization