added authentication method and filter to make sure user must be signed in unless accessing index