Changed controller rules so that non logged in users cannot access anything.