rails - authentication, authorization and auditing confusion

I am trying to decide on an AAA plugin/s but there seems to be so many of them! and a lot of the posts seem quite old, 07/08.

I saw goldberg but it seems like the site is down...

my app needs login,logout and forgotten passwords and needs to be able to restrict a user based on controllers/methods(role based).

On the auditing side I need to be able to log when a user edits/creates data.

you can start looking at Devise for authentication, and CanCan for simple authorization.

for logging, don't know if there are any plugins, but you easily can write some observer.