override access control config in application.rb - from forked repo