Dried up authorization logic into before_filter.