move authenticate filter for application to welcome controller