adding working example for cookbook `has_many :through` homework
Merge remote-tracking branch 'upstream/master'
authentication added, some authorisation included
some authorizations implemented