Add authorization for all models