class ApplicationController < ActionController::Base protect_from_forgery def authenticate! render :text => 'forbidden' unless cookies[ :login ] end def authorize! end end