Added before filter to authorize users