Added devise authentication for users in the timesheet_controller.
Changed the '@current_user' to '@url_user' to avoid confusion with the devise method 'current_user'.