Add authorization on 'MembershipsController'