added rest of the authentication (restricted some pages and some elements unless logged in, added helper methods); changed some static code (mockup) to dynamic ruby/rails