Add some security, something like ```before_filter :authenticate_user!```