Add authorization to index action