Closes #21 by moving require_login into users_controller