Added Authorize attribute to actions in need of authorization