ActionController Metal HttpAuthentication