Added authorization on all controllers