removed after_action verify_policy_scoped from application_controller to each controller