Move authorize call to controller methods