Add authorization to some controllers