this should be in a before_action