migrate to mongodb, add devise authentication and cancan authorization systems