update rails to 4.1.0
add authentication & authorization