if you want to use my assert_protected_action  helper method in controller_support.rb feel free :)