Add caps to Authorize Controller