move login check from construct to beforeAction