Added require_login before all actions except new and create user