new/create/show implemented
com before implement authlogic