Exercise 2: What Actually Changed Since Chapter 8 — Possible Solution
====================================================================

WHAT LOOKS IDENTICAL BETWEEN STEP 5 AND CHAPTER 8
------------------------------
Per this chapter, the route, the update_title action, Strong Parameters, and the form itself are all exactly the same code written in Chapter 8 - nothing about the request handling mechanics changed.

WHAT ACTUALLY CHANGED
------------------------------
Per this chapter, Chapter 8 deliberately left update_title with no authentication check at all - a genuinely missing before_action filter, not a placeholder value inside an existing method. Chapter 9 added that missing filter. By the time this capstone reaches Step 5, that added filter is what determines whether the identical-looking submission actually succeeds - logged in, it behaves exactly as it did in Chapter 8; logged out, the request is now redirected to the login page instead.

THE EXACT LINE RESPONSIBLE
------------------------------
Per this chapter, the responsible line is before_action :require_admin, only: [:update_title] on PagesController, added in Chapter 9 - it didn't exist at all in Chapter 8's own version of the Controller.

WHY THIS WORKS AS AN ANSWER
------------------------------
It correctly identifies that the surrounding code is unchanged since Chapter 8, and correctly identifies the added before_action :require_admin filter - absent in Chapter 8, present since Chapter 9 - as the exact difference responsible for the request now being genuinely protected.