Added Authentiation to controllers and encoded HTML for fallen message