b. authorization and registration
+ config/groups.rb for sample