Added feature to require login except SessionsController