removed username
removed Carrierwave since it's not currently being implemented.
removed inverse_of relationship
Moved the require_login filter to the application controller
the owner is now validated in the show method
fixed indentation
altered test email address
expanded the test parameters
Merge pull request #13 from SViccari/security-improvements

Security improvements