new 'authorized' controllers with CurrentUser property