Adding authorize attribute to an action allow action execution only to authorized users