Add authentication to user & submission controller