before_action :authenticate_user! w products_controller.rb