Subscribe option: move to its own controller, add authorization

https://github.com/openSUSE/osem/pull/470
Fixes https://github.com/openSUSE/osem/issues/467