uncomment before_action :authenticate_user_from_token!