fixed authentication by moving before_action above