before action auth