Finish first part of railscast about authorization