add authenticate_user on some action