What can authorization learn from Rails? | Dark Hacker News