added before filter for user authentication to ideas and upload controllers. There is now an error that is likely due to missing csrf token.