Remove authorization
Migrate authorization to each controller