Add basic authorization to User actions