add authorization to all resources and remove unused actions