Add Authorize attribute for some controllers