Exercise 9.6.6: Signed-in users have no reason to access the new and create actions in the Users controller. Arrange for such users to be redirected to the root URL if they do try to hit those pages.

Change-Id: Ibdab3271a73af9d6f8e757373ff060d0af26883a