Added user auth policy. Rescue now responds with a forbidden HTML status code. Fixed decorator nilclass error using decorates_assigned - with potentially nil records.