How Rails built an imperfect credentials system
blog.capsens.eu