This controller was just missing an end and had the private methods in the wrong place. Everything after the private label is a private method, so by putting it at the top of your controller, you effectively made the whole controller private.