add authorize event in controller