Small edit to stories_controller - only signed_in can call #show