changed the controller before_filter so you must sign in to do anything