add authorize to users actions