remove token authentication and add only action on before _filter