added before filters to authenticate users