Added Authorize attribute to controller; other minor changes