rails app with  basic authentication and authorization