Add before_action auth method

Now you can't access messages, dogs, owners, or comments through hardcoded toutes