Added before action in application controller

prevents access to things you shouldn't have unless you're logged in
bounces you back to the login page automatically