implements before_filter, redirecting users away from pages that they should not be able to access