add before filter authenticating user before access to notes#index allowed