fixes a bug where a user with no expense reports was unable to reach the index action due to poorly implemented authentication