changed permission in intermediate controller
bugfix in controller authentication
changed intermediate authorization to own authorization style
bugfix in authorization