add before_filter login_required