added to member auth in application controller