[642] Adds auth checks to the relevant places in the controller