Added authorize! in all the controller actions. Yet to test.