authorized to current, and move to_html to initializers (String extension)
Some new tests, a comment test on the controller: ATP
Merge repo changes we didn't have yet (a merge or two?)