Added controller routing and authorization tests