Authorization to users controller