updated CV and made authorize app controller method to restrict non admins