Ruby on Rails Application with authentication and authorization