added beforeaction autenticate user to stay controller