<commit_before>(highest priority first)

# activation code (like restful-auth) instead of salt?
# remove dependency on root_url?
# should_have_form should be pulled into shoulda
# generator should print out instructions to include modules existing files
# check to make sure attr_accessible doesn't override and w/ attr_protected
# move shoulda macros in test_helper to shoulda_macros folder
# add shoulda and factory girl dependencies to gemspec
# refactor Mailer default_url_options[:host] to something cleaner
# application controller uses protected, all other controllers use private
# add information about url_after_create to README or github wikis

ideas to steal from merb-auth:

# store current_user on the session, not controller
# respond with 401 Unauthorized when request requires authentication 
# respond with 405 Method Not Allowed when action requested isn’t allowed
# 401 and 405 need to be in Exceptions controller or use safety_valve
# email confirmation is a strategy
# forgot password is a strategy
# salted password is a strategy

http://adam.speaksoutofturn.com/articles/entication_vs_orization.html<commit_msg>Update TODO list<commit_after>(highest priority first)

# activation code (like restful-auth) instead of salt?
# remove dependency on root_url?
# generator should print out instructions to include modules existing files
# check to make sure attr_accessible doesn't override and w/ attr_protected
# move shoulda macros in test_helper to shoulda_macros folder
# refactor Mailer default_url_options[:host] to something cleaner
# application controller uses protected, all other controllers use private
# add information about url_after_create to README or github wikis

ideas to steal from merb-auth:

# store current_user on the session, not controller
# respond with 401 Unauthorized when request requires authentication 
# respond with 405 Method Not Allowed when action requested isn’t allowed
# 401 and 405 need to be in Exceptions controller or use safety_valve
# email confirmation is a strategy
# forgot password is a strategy
# salted password is a strategy

http://adam.speaksoutofturn.com/post/57615195/entication-vs-orization
{'fraction_non_alphanumeric': 0.04149377593360996, 'fraction_numerical': 0.01475334255417243, 'mean_word_length': 5.595744680851064, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3542592', 'n_tokens_mistral': 576, 'n_tokens_neox': 527, 'n_words': 265}