added devise protection to controllers and sign in out redirects