scaffold and basic auth
users can only see index and show
digest the usernames
basic auth done