turns require log in into a before action