Add before_action auth method