check for authentications in before_filter