Fixed Autorization attribute in User Controller