Update user authorizer
Protect action
Set model authorizer