Add back_end controller
Add authorization to all private controllers