current_user restrictions and basic authorize permissions setup for doctor and patient login
pre-permissions specs