Admin authorization

Built upon previous remember me cookies, railscast #385 keeps failing with application_controller >>> (params[:controller], params [:action])

follows the idea of the michael hartl book