change signed_in_user method to require_login for better readability