adding authorize to application controller