Added require_login filter to the controller otherwise anyone (even if it is not logged in) can add/modify/delete links.