Forgot to add auth filter to base controller.