Create Concern for controller authorization