need to place a before filter in order to actually force the application to authenticate from gh