add before_filter to Pin to require authentication