Ruby resource authoriation