Add authorization to all extra actions that need to be protected.