DRYing up controllers using before_action