Authorization check added to routes