chapter 9 exercise 6: signed in users can't access User new and create actions