Added roles and authorizations for controllers