Blog with working authorization

Blog has authorization using permissions.rb.