Creates the following tables: Users Roles Permissions ControllerFilters Implements a devise authentication strategy already configured. Makes available an 'authorized_to? method in application controller that returns true if the users permissions match the given permissions/list of permissions. Implements whitelisting of all requests. Every http request needs to have an associated ControllerFilter. If the filter exists, then the current_user's permissions must satisfy the permissions required by the filter.