Add before_filter :authorize on tickets_controller