Ensure user is logged in for all controller actions
Correct HTTP status code for unauthorized requests