added before actions to controllers to prevent unauthenticated users from specific actions