Remove old decrypt_password method.
Add more authorization rules [#47]
Use Authority gem instead of CanCan -- start moving stuff over.
Refactor up NotesController; extract out resource loading and auth.
Customize response on forbidden action.
Redirect root path to stream path.
Don't expose the notes index shallow route.
Use new hash syntax in routes.