added authorization to CuisineController to require login for all actions