Fix typos in code. Add before_filter :authenticate_user!.