title: Rails 3, how to secure and protect controllers and urls
body: <p>I'm sort of new to rails, what I want to to is protect users profile</p>
  
  <p>what I mean is if user 1 login and go to edit his profile he can, but also if he change on the url to user to # 2 they can also change their information</p>
  
  <p>localhost:3000/users/2/edit</p>
  
  <p>I'm a little lost, any help will be greatly appreciated, or suggestions of good books/blogs</p>