adds helper method to all controllers to check authorization of user