Removed before_filter as authentication is done within update method