authorize before_filter added to app. controller