Fixed policy bugs and issues not checking logged_in\? before looking at current_user