before filter protect
protect some actions