adding the unautorized check to activity and goal show actions