Add before_filter to make sure user is authenticated
Use devise for login authentication