Plug in Devise, sanitize strong params and force all controllers to authenticate.