Add authorization on 'AttendancesController'