Extract authorization statement to before filter