add authenticate user before action to locations controller
format controllers