popup & model event with has_and_
authentication/authorization & update settings  profile