use role-based authorization for 'rails-signup-download' app