class UpdatesController < ApplicationController before_action :authenticate_user!, only: [:new, :create, :edit, :update, :destroy] allow_unauthenticated_access(only: [:index, :show]) end