before devise and user authentication