added before_action to controller