before filter for user auth