tried but didn't get before_action authenticate user to  work