Yet another role-based authorization system for Rails