FIX: don't return 200s when login is required to paths

When running `ensure_login_required` it should always happen prior to
`check_xhr` cause check xhr will trigger a 200 response

app/controllers/admin/embeddable_hosts_controller.rb

@@ -1,7 +1,5 @@
 class Admin::EmbeddableHostsController < Admin::AdminController
 
-  before_action :ensure_logged_in, :ensure_staff
-
   def create
     save_host(EmbeddableHost.new)
   end