before_filter :authenticate_user... only doing it now -___-