updated rails notes on authentication