Added before_action for security