fixed favorite boolean problem
added before_filter :authenticate_user