protected controllers

added protection to controllers to only allow signed in users.