class EmployeesController < ApplicationController
  before_filter :authenticate

  # GET /employees
  # GET /employees.xml
  def index

...

  def authenticate
@@    authenticate_or_request_with_http_basic do |user.password|
@@      user=="admin" && password=="geheim"
    end
  end

end