added links to  _layout and authorize to controllers