authorization implemented to all controllers
test commented