Can you use Devise's built in filter here? `before_filter :authenticate_user!`