Update message_controller.rb

Add acl logged in check