Fix: controllers using old methods. Add: simple auth for brewery deletion