Added some auth to baker controller