ApplicationController methods should be protected