'rails g scaffold Post author:integer title:string body:text published:boolean'
'rake db:migrate'
user/post one-to-many association
posts controller: sanity checks against CrUD operations
users: only allow logged-in admins to create new users
view: render 'New User' link only if admin