renamed before_filter to before_action
changed user authorization action