Added :confirmed to attr_accessible.
Deleted sign_out link if you're not current user.