a simple authentication demonstration based on RailsCast #250