trying a before filter for authentication