fixes for merge request
use Devise's built in before_filter :authenticate_user!
check for current user existence in does_url_belong_to_user?