authentication protections using rails built-in features
Merge remote-tracking branch 'origin/master'