added before_filter for authenticated users