try&err rspec
use launchy gem
add 'before_action :correct_user'
implement friendly forwarding