Use action filters to save the db changes instead of policy injection