Attempting a new strategy with page authorization

using a Rails-esque 'before' check in the controller