Add authorization to Users controller