AuthenticatedAction to support async