added before actions for login & setup controllers.