added before_action so users have to be signed in to create rooms