autehnticate user before actions
before_filter better
add admin to user
hide Books actions from user
[err] remove book from bookshelf