Added authorization method to application controller and before_filter to all controllers to guard against unauthorized viewing of other users' accounts