before_filter :authorize, :except => [:login, :register]