application authorize:

add load_and_authorize_resource statement  for controller