forget it, the rb_application_controller has adds an authorize before filter