Closes #56 Adds access filters to controllers