Add authorization protection to all applicable controllers