use (rails4) before_action instead of (rails3) before_filter