Authenticate before on pretty much all controllers