def access_denied
    if user?
      flash[:error] = 'Access denied to ' + session['return-to']
      begin
        redirect_to :back
      #rescue ActionController::RedirectBackError
!!      rescue RedirectBackError
        redirect_to :controller => "user", :action => "home"
      end
    else
      redirect_to :controller => "user", :action => "login"
    end
  end