DRYing up repeated controller code with a before_action filter
Using a before_action filter to prevent users from modifying other users
Using a before_action filter to prevent users from modifying other users' pictures
Requiring users to be signed in before they can do anything else with Devise's built-in 'authorize_user\!' method