add before_filter to controllers to restrict actions for users and redirect to login