adds logged_in? before_filter