working on authorization

before_filter :authorize preventing app to work