add: hook to check if user is logged in before any controller logic is executed