Ruby on Rails: Private Events