added a before_filter so to see rewards, you have to log in