Added authorization by editing controller and view