[MUST] There's no actions when not logged in, anonymous user will see blank page.

You must consider to render 401 or 403 or 404 page.

And IMO, using `before_filter` to shut anonymous users off from actions.