add authorize controller view & view