diff --git a/app/controllers/cmtool/application_controller.rb b/app/controllers/cmtool/application_controller.rb
index 85c0b84..c8b66ef 100644
--- a/app/controllers/cmtool/application_controller.rb
+++ b/app/controllers/cmtool/application_controller.rb
@@ -13,7 +13,11 @@ module Cmtool
     end
 
     def authorize_user
-
+      if respond_to? :authorize_cmtool, true
+        authorize_cmtool
+      else
+        render text: 'Please define authorize_cmtool in your application controller. This area needs to be secured!', status: 403
+      end
     end
 
     def check_environment
diff --git a/app/views/cmtool/application/_menu.html.slim b/app/views/cmtool/application/_menu.html.slim
index be43693..75960cc 100644
--- a/app/views/cmtool/application/_menu.html.slim
+++ b/app/views/cmtool/application/_menu.html.slim
@@ -29,4 +29,4 @@
               = current_user.email
               span.caret
             ul.dropdown-menu
-              li.log-out= link_to t('helpers.links.logout'), destroy_user_session_path
+              li.log-out= link_to t('helpers.links.logout'), cmtool.destroy_user_session_path, method: :delete
diff --git a/lib/cmtool/engine.rb b/lib/cmtool/engine.rb
index a61d821..7be971d 100644
--- a/lib/cmtool/engine.rb
+++ b/lib/cmtool/engine.rb
@@ -19,6 +19,11 @@ module Cmtool
       require 'bourbon'
       require 'slim-rails'
       require 'haml-rails'
+      require 'devise'
+      require 'devise_simply_stored'
+      require 'paperclip'
+      require 'jquery-rails'
+      require 'tinymce-rails'
       Cmtool::Menu.register do
         group label: :site do
           title t('cmtool.menu.site.title')
diff --git a/spec/dummy/app/controllers/application_controller.rb b/spec/dummy/app/controllers/application_controller.rb
index e8065d9..f4fcdb2 100644
--- a/spec/dummy/app/controllers/application_controller.rb
+++ b/spec/dummy/app/controllers/application_controller.rb
@@ -1,3 +1,9 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery
+
+private
+
+  def authorize_cmtool
+    redirect_to new_user_session_path unless current_user.present?
+  end
 end