Added authentication rule before certain actions