factored in before_action associated w/ authenticating a user session