Added authentication to all controllers but Pages (public facing)