Removed auth filter and added authenticating action so that we don't go to database twice to look up the user