removed auth check from action(it should be in controller), added sample how to display error message