Require authentication on CreditCardController

This was a bug. Oops!