You need to use the before_filter instead of authenticating per action.