updated auth notes to rails 4