correctly using OnActionExecuting