Add isAuthorized()

Overrides AppController::isAuthorized(), which only allowed admins
access to restricted actions