adding authentication, authorization; converting .erb to .haml