Simple, no-nonsense authorization for Rails4