Added authorization for admin items, orders, and dashboard controllers