removed logged_in? method from user controller