added authorization filter for login users in all controllers