add before file to require authentication to each controller