working authorization, railscasts #385, pasword reset is failing
added comments to permissions