added before filter authenticate to user_controller