Add isAuthorized to controllers