setup authentication using devise. homepage will be accessible without logging in, but to modify tiles, you will need to log in.
adding roles via the gem declarative authorization.