adding authorizers to rails