added before action authentication