Added authorization to views and controllers