authorize controllers
dry up set_store method
Merge branch 'master' of https://github.com/ash37/list