Basic RoR app with multiple authorization schemes