ensure user login for controllers except dashboard