add before_action require login to prospect cards controller, edit sessions and users controller