Authorisation now needed to see any of the controller views