Finish writing integration tests for the authentication_pages authorization features (Listing 9.11), but have not yet started to implement any of the code to get them to pass.
Add a method to sessions helper that verifies that a user is the current user, then use it to
ensure that users can't update profiles that aren't their own, create a before filter that
runs this check before presenting the user with the form to update their profile and decoupled
it from the edit method, add integration tests for all of these features that are currently all
passing - App is in the same state as the book's just before beginning section 9.2.3
(Friendly forwarding).