update user_controller with before filter