Move authorization from Application Controller to Sessions Helper