Add before action to require login