better routing using before_filters instead of constraints
only officers should be able to reach /members/new