use devise before_action(authenticate_user!)
extract loading and validating user in methods
Merge branch 'pr/44'

Conflicts:
	app/controllers/users_controller.rb