Roll your own Authorization in Rails (shakycode.com)

Would love to get some hints/tips on a refactoring for this. This is something I came up with a while back and I'm sure it could use some improvement.