added authentication befor_filter and same layout for all controllers