Move dataexport functions to separate controller.
Add very basic authorization for dataexports controller.