add authorize before filter to videos_controller