The user must be authetnicated to access controller.