Rails application about security with role based application