controllers: move authorize_resource before_filter to the base class

Signed-off-by: May <sirhuntthepure@users.noreply.github.com>