Added authorization to UI controller