Created [RequireAuthorization] attribute for controller