added custom methods in application controller for user access controls