Add authorization to some actions