Check for authorization directly in BaseController