Restrict routes to users

Apply the following restrictions:
GET    /users/new   No user logged in
POST   /users       No user logged in
DELETE /users/:name Logged in username must be :name
GET    /session/new No user logged in
POST   /session     No user logged in