Move authorization override to content and admin base controllers