Add authorization for contractors controller