Add before_filter logged_in_user
Security hole fixed; redirect to login path when not logged in user want to edit page