Add basic user and tour authorization