What do you think about protecting this action? Maybe `redirect_to home_path if logged_in?`?