Add authorization before_action, fill seed