activated :require_login before_filter
added not_authenticated and activated login_required