An authorization Rails plugin using a declarative DSL for specifying authorization rules in one place