Consistent authorized redirection in controllers

- Added new base controller method for redirecting to action only if
current user if authorized to do so.
- Added missing authorized redirection checks after user and role
creation.
- Replaced existing code duplication on authorized redirection.