A plugin for authorization in a ReSTful Ruby on Rails application