update before_filter :authenticate_user! for controllers