@thomasmckay @ehelms @jlsherrill request that we handle authorization separately since role based action controllers are going to be worked on soon.