authentication automatic session when sign up
first steps with authorisation cancan
authorisation