Authenticate all `days_off_controller` actions