adding exclude option to actions
refactoring AuthorizationController