Controller actions restrict results

All resources restrict index actions to current_user's resources. Set up
registrations#create to initialize a valid user.