hide links to non authorized user and added security in controllers