Fix auth stuff - make before_filter use symbols, not calls