Add require_login to application controller
Add sessions#destroy to controller