Added authorization before actions