remove before_filter for auth