Action and Parameter permission framework for Rails 4 applicaitons