Authorization proof of concept.
Replace admin with database field.
Authorize :new action.
Link user with movie.
Some commit.