added require_authentication to application controller