Add authorization check (signin_require, self action check) to controllers