following along on a ruby authentication tutorial