fix is_authenticated in app controller