secret_controller.rb

module Quarterly
  class SecretController < ApplicationController
    before_filter :authenticate

    def coco
      render 'pages/coco-music'
    end

    private

    def authenticate
      authenticate_or_request_with_http_basic do |user, pass|
        user == ENV['COCO_USERNAME'] &&
          pass == ENV['COCO_PASSWORD']
      end
    end
  end
end