Adding security to all controllers