Included authentication in app controller and in tests