Added before_filter :check_authentic_user to avoid
security problem