Added authorization tokens on top of private controllers