global

def protect(*args) 

def protect(*args)
  condition {
    unless authorize(params["user"], params["password"])
      halt 403, "go away"
    end
  }
end