basic authentication

app/controllers/application_controller.rb

@@ -9,4 +9,10 @@ class ApplicationController < ActionController::Base
     return false
   end
 
+  def authenticate(username, password)
+    authenticate_or_request_with_http_basic do |u, p|
+      u == username && p == password
+    end
+  end
+
 end

app/controllers/categories_controller.rb

@@ -11,6 +11,8 @@ class CategoriesController < ApplicationController
   # GET /categories/1
   # GET /categories/1.json
   def show
+    district = @school.district
+    authenticate(district.name.downcase, "#{district.name.downcase}!")
     @school_category = SchoolCategory.for(@school, @category).first
     @child_school_categories = SchoolCategory.for_parent_category(@school, @category)
     @questions = @category.questions

app/controllers/districts_controller.rb

@@ -10,6 +10,7 @@ class DistrictsController < ApplicationController
   # GET /districts/1
   # GET /districts/1.json
   def show
+    authenticate(@district.name.downcase, "#{@district.name.downcase}!")
     @schools = @district.schools.alphabetic
   end
 

app/controllers/schools_controller.rb

@@ -7,6 +7,8 @@ class SchoolsController < ApplicationController
   # GET /schools/1
   # GET /schools/1.json
   def show
+    district = @school.district
+    authenticate(district.name.downcase, "#{district.name.downcase}!")
     @school_categories = @school.school_categories.for_parent_category(@school, nil).sort
   end
 

app/models/category.rb

@@ -31,7 +31,7 @@ class Category < ApplicationRecord
       "academic-learning",
       "citizenship-and-wellbeing",
       "pilot-family-questions"
-    ].index(root_identifier)
+    ].index(root_identifier) || 0
   end
 
 end