added more auth attributes to controllers, extra product view