lock gem versions
Use erb for protected page
Simplify User model