Added authentication requirements to controllers
Add tests for authorization