A Rails user authentication challenge