Adding auth to product controller