Before action - authenticate in application controller