将application.rb中的
before_filter :authorize, :except => :login
变为不可见：#before_filter :authorize, :except => :login
