add accessRoles to Controller class and remove it from application controllers
to restrict accessibility of users to the application