Sync authentication logic in RestrictedAttribute and BaseController
Fill in missing xml doc comments for notify methods